Static task
static1
Behavioral task
behavioral1
Sample
c25638e64490200689595037243243ad.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c25638e64490200689595037243243ad.exe
Resource
win10v2004-20240226-en
General
-
Target
c25638e64490200689595037243243ad
-
Size
277KB
-
MD5
c25638e64490200689595037243243ad
-
SHA1
e9d1cbbf6118f5c8ae720ef10639825f6fc83093
-
SHA256
e06ba72e225cdbe88cc1a0b6e4d7ba46b4f97ffb760a89639a757187c6c61de8
-
SHA512
25cbc170bbd31dd129d889f35dfea9e0c933723194f16e50ebdac9d00dcb6d0d837eb57f4760199ee4aa60061a420bd98aeb7bc4bc60b10e954bcdcf687882a8
-
SSDEEP
6144:MzyjyDLsZH9AfXA7Fk5DJUew6a6orfixentx:Mmj+mH9AfwODJUv6Zor6xev
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c25638e64490200689595037243243ad
Files
-
c25638e64490200689595037243243ad.exe windows:5 windows x86 arch:x86
97bed9ef4f9823b5668276ae443efdd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegQueryValueExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ